VMware ESX Server 1.5.2 Patch 6 Security Update

Released 1/14/04 TAR File

This patch includes updates for ESX Server 1.5.2 that addresses the following security vulnerabilities:

• mod_ssl security exploit CAN-2004-0885 (See Knowledge Base Article 1555 for details.)
• mod_ssl security exploit CAN-2004-0700 (See Knowledge Base Article 1429 for details.)
  
• Linux security exploit CAN-2004-0415 (See Knowledge Base Article 1431 for details.)
  

In addition, this update removes a limitation on using more than 30 LUNs simultaneously.

There are separate security updates for ESX Server 2.1.2 and 2.0.1 available as the VMware ESX Server 2.1.2 Patch 1 Security Update and VMware ESX Server 2.0.1 Patch 1 Security Update.

Note: This update only works if you have ESX Server 1.5.2, Build 5835. Please make sure that this build is installed before applying the patch. The installer will log the name of this patch and information on the updated components in the file /var/log/vmkernel-version.

Installing the Update

This update will require a reboot of your ESX server to take effect. You must shutdown your virtual machines before installing the patch.

1. Log in as root into the ESX Server 1.5.2 service console.
2. Your path variable should contain /usr/bin:/bin.
3. Download the tar file into the temporary directory /tmp, on your ESX service console.
4. Change directory to /tmp.
5. Verify the integrity of the package:
   # md5sum esx152_update_10816.tar.gz

   The md5 checksum output should match the following:
   90633caa3b0790a00c77fec2616fcb9a esx152_update_10816.tar.gz

6. Extract the compressed tar archive:
   # tar -xvzf esx152_update_10816.tar.gz
7. Change directories to the newly created directory /tmp/esx152_update_10816:
   # cd esx152_update_10816
8. Run the driver installer:
   # /usr/bin/perl ./esx10816update.pl
9. The system updates have now been installed. A reboot prompt displays:
   Reboot the server now [y/n]?

   This update will not be complete until you reboot the ESX Server. If you enter N, to indicate that you will not reboot at this time, ESX Server displays the warning message "Please reboot the server manually for this update to take effect. Update has been terminated unexpectedly." If you see this message, you must manually reboot the server to complete the driver update.

10. At the reboot prompt, enter Y to reboot the server.